Topic

Cisco

4 reports tagged Cisco, spanning news and vulnerability coverage.

News
Exploited Cisco SD-WAN Manager flaw gives attackers admin API access

CISA added a critical Cisco Catalyst SD-WAN Manager authentication bypass to its KEV catalog with a three-day federal deadline and a required compromise check.

known-exploited-vulnerabilitiesciscosd-wan +3

2026-09-30
Vulnerability
Cisco Identity Services Engine Authentication Bypass (CVE-2026-76460)

CVE-2026-76460 is a CVSS 10.0 unauthenticated API authentication bypass in Cisco ISE and ISE-PIC, CISA KEV-listed Sept. 16, 2026, with no vendor workaround.

ciscoidentity-services-engineise-pic +4

2026-09-19
Vulnerability
Cisco Secure Email Gateway SQL Injection (CVE-2026-76461)

CVE-2026-76461 is a CVSS 9.8 SQL injection flaw in Cisco Secure Email Gateway's AsyncOS email parsing that allows unauthenticated root command execution.

ciscosecure-email-gatewayasyncos +3

2026-09-17
Vulnerability
Cisco Secure Firewall Management Center Authentication Bypass (CVE-2026-20079)

CVE-2026-20079 is a maximum-severity CVSS 10 authentication bypass in Cisco Secure Firewall Management Center, added to CISA KEV Sept. 9, 2026 as actively exploited.

ciscofirewall-management-centerauthentication-bypass +2

2026-09-11